Privacy Policy

This Privacy Policy explains how Martello Systems, LLC (“we”, “us”) collects, uses, and protects your information when you use Quag (the “Service”).

What we collect

Account information: the email address and optional display name you provide at signup. Your records: the earnings, expense, mileage, and invoice data you enter or import (for example, shift times, payouts, and miles). Payment information: if you subscribe, billing is handled by Stripe; we receive limited subscription metadata but never store your full card details. Usage data: basic technical and usage information (such as pages visited and errors) to operate and improve the Service.

How we use it

We use your information to provide the Service (compute your dashboards, generate invoices), authenticate your account, process payments, communicate with you about your account, and maintain security. We do not sell your personal data or share it with advertisers. Any aggregated benchmarks are computed so they never expose any individual user's records.

AI features

If you use the AI assistant or another AI feature, the relevant records — your recent jobs, companies, expenses, and year-to-date tax figures, or the receipt or earnings file you upload — are sent to our model provider, Anthropic, to generate the answer. They are processed to produce your result and are not used to train anyone's models. AI features run only on your own records, never anyone else's.

The assistant can take exactly one action that leaves your account: emailing an invoice to the client on file and marking it sent. It can never do that on its own — every such request is held in Settings → Approvals until you explicitly approve it, and expires unsent after 24 hours. Nothing else the assistant does changes or deletes your data. You can turn every AI feature off, at once or individually, in Settings → AI controls; switching one off stops the processing itself.

Cookies and sessions

We use a secure session cookie to keep you signed in. This cookie is essential to the Service and is not used for advertising. We also use Google Analytics 4 (GA4) cookies, but only after you accept analytics in our cookie banner. If you decline, no analytics cookies are set and no analytics data is collected. We do not use any advertising cookies.

Third parties we use

We rely on a small set of service providers, each receiving only the minimum data needed to do its job: Stripe (payment processing), Brevo (transactional email — including any invoice we email to your client on your behalf), Anthropic (the AI model behind the assistant and the other AI features — see AI features above), and our hosting and database infrastructure. If you accept analytics in our cookie banner, we use Google Analytics 4 to understand aggregate usage; it does not load and collects nothing if you decline. We will keep this list current as our stack evolves.

Data retention

We retain your account and records for as long as your account is active. When you use “Delete my Quag data” in Settings, your Quag records — profile, gigs, shifts and earnings, expenses and receipts, invoices, income sources, contacts, companies, checklists, and uploaded documents — are permanently deleted immediately. Your Martello sign-in (email address and password) is not deleted by that action, because the same sign-in works across Martello apps; to remove it as well, email [email protected]. We may retain limited information where required to comply with legal obligations or resolve disputes, and residual copies may persist in encrypted backups until they overwrite on their normal cycle.

Your rights

You can access, correct, or delete your information. Use “Delete my Quag data” in Settings to permanently delete your Quag records yourself (your shared Martello sign-in remains — see Data retention above), or email [email protected] to request access, correction, or deletion. Depending on where you live, you may have additional rights under applicable data-protection laws.

Security

We use reasonable technical and organizational measures to protect your data, including encrypted transport and hashed credentials. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

Quag is not intended for anyone under 16, and we do not knowingly collect data from children. If you believe a child has provided us information, contact us and we will delete it.

Changes to this policy

We may update this Policy from time to time. Material changes will be reflected by an updated “last updated” date above.

Contact

Questions about your privacy? Email [email protected]. Quag is operated by Martello Systems, LLC.